opensearch-project/OpenSearch

[BUG] optional plugin dependency still leads to warning if dependent plugin is not present

Open

#21322 opened on Apr 22, 2026

View on GitHub
 (4 comments) (0 reactions) (1 assignee)Java (8,123 stars) (1,505 forks)batch import
Pluginsbuggood first issue

Description

Describe the bug

if a plugin is installed which has an optional dependency on another plugin the following warning is nevertheless printed on startup:

{"type": "server", "timestamp": "2026-04-22T13:53:24,973+0000", "level": "WARN", "component": "o.o.p.PluginsService", "cluster.name": "test-opensearch", "node.name": "test-opensearch-0", "message": "Missing plugin [workload-management], dependency of [opensearch-security]" }
{"type": "server", "timestamp": "2026-04-22T13:53:24,973+0000", "level": "WARN", "component": "o.o.p.PluginsService", "cluster.name": "test-opensearch", "node.name": "test-opensearch-0", "message": "Some features of this plugin may not function without the dependencies being installed.\n" }

Related component

Plugins

To Reproduce

  1. use the minimal distribution of OpenSearch
  2. install the security plugin
  3. install the demo configuration for the security plugin (or provide your own configuration)
  4. start the cluster

Expected behavior

since it is only an optional dependency it mustn't lead to a warning: the plugin authors (in this case of security) explicitly flagged it as optional, i.e. they deliberately wrote their code so that it can run without it. there is nothing wrong with this setup.

Additional Details

Plugins security

Screenshots n/a

Host/Environment (please complete the following information):

  • OS: linux
  • Version OpenSearch 3.6.0

Additional context the security plugin defines their dependency here: https://github.com/opensearch-project/security/blob/48934186b6dcf3705b58a0d217745d298b484821/build.gradle#L398

Contributor guide

Tech stack
java
Domain
backend
Issue type
bug
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
blocked
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
JavaGradleOpenSearch plugin system
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
35
Research direction
Examine the PluginsService class in the OpenSearch codebase where the warning for missing dependencies is generated. Look at the build.gradle of the security plugin (line 398) to confirm the dependency is marked optional. Trace the logic that determines whether to print the warning and identify where the optional flag is not being checked. Propose a change to suppress the warning when the dependency is optional, ensuring it only appears for non optional dependencies.